[lkml]   [2012]   [Jan]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [RFC,PATCH 1/2] seccomp_filters: system call filtering using BPF
    On Thu, 12 Jan 2012, Alan Cox wrote:

    > In general I like this approach. It's simple, it's compact and it offers
    > interesting possibilities for solving some interesting problem spaces,
    > without the full weight of SELinux, SMACK etc which are still needed for
    > heavyweight security.

    Yes, I can see potential to vastly simplify MAC policy in some cases.

    - James
    James Morris

     \ /
      Last update: 2012-01-13 02:37    [W:0.019 / U:36.248 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site